
CVE-2025-26466 - SSH Ping DoS Ruby module for Metasploit Framework
OpenSSH (versions 9.5p1 to 9.9p1) is vulnerable to a memory and CPU exhaustion DoS Attack by sending repeated SSH2_MSG_PING packets (type 192). This occurs before authentication, and can result in server lockup due to poor queue/buffer handling.
https://nvd.nist.gov/vuln/detail/CVE-2025-26466
Copy .rb file into your 'modules' folder, f.e.
/usr/share/metasploit-framework/modules/auxiliary/dos/ssh
Run Metasploit console and search for the module.
msfconsole
search ping_dos
I am sharing this just for educational purposes, you shall not use it on infrastructure you are not authorized to.
That's my first project shared on GitHub. Feel free to leave comments about it, so I can learn and make it better.